Analysis
-
max time kernel
300s -
max time network
260s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system -
submitted
30/05/2024, 23:41
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
fca8f8e89a18a8f2e33467507470c63ff70c9739ae4588b53ceaaf4acf465f3f.exe
Resource
win7-20240221-en
2 signatures
300 seconds
Behavioral task
behavioral2
Sample
fca8f8e89a18a8f2e33467507470c63ff70c9739ae4588b53ceaaf4acf465f3f.exe
Resource
win10-20240404-en
2 signatures
300 seconds
General
-
Target
fca8f8e89a18a8f2e33467507470c63ff70c9739ae4588b53ceaaf4acf465f3f.exe
-
Size
3.0MB
-
MD5
d2204fb7b258c988d269cf7d3751e361
-
SHA1
7a845c39d30dc4bc60540e4d6b7e073861ac2455
-
SHA256
fca8f8e89a18a8f2e33467507470c63ff70c9739ae4588b53ceaaf4acf465f3f
-
SHA512
d42ebb8b19816112a6b5220fa02406ce5374c57cb8768590deb4495c0e031fe59482f6cc66946972a286d43a25d58f4d3cb27c4b5ffaff6d90c1c342d0a08396
-
SSDEEP
98304:DFev0/P9t3WZ5ni4r2kFL+dVh2Qj4TdjcEyML:DF80/PH30JzJ+dVh5fn
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 31 IoCs
pid Process 1944 fca8f8e89a18a8f2e33467507470c63ff70c9739ae4588b53ceaaf4acf465f3f.exe 1944 fca8f8e89a18a8f2e33467507470c63ff70c9739ae4588b53ceaaf4acf465f3f.exe 1944 fca8f8e89a18a8f2e33467507470c63ff70c9739ae4588b53ceaaf4acf465f3f.exe 1944 fca8f8e89a18a8f2e33467507470c63ff70c9739ae4588b53ceaaf4acf465f3f.exe 1944 fca8f8e89a18a8f2e33467507470c63ff70c9739ae4588b53ceaaf4acf465f3f.exe 1944 fca8f8e89a18a8f2e33467507470c63ff70c9739ae4588b53ceaaf4acf465f3f.exe 1944 fca8f8e89a18a8f2e33467507470c63ff70c9739ae4588b53ceaaf4acf465f3f.exe 1944 fca8f8e89a18a8f2e33467507470c63ff70c9739ae4588b53ceaaf4acf465f3f.exe 1944 fca8f8e89a18a8f2e33467507470c63ff70c9739ae4588b53ceaaf4acf465f3f.exe 1944 fca8f8e89a18a8f2e33467507470c63ff70c9739ae4588b53ceaaf4acf465f3f.exe 1944 fca8f8e89a18a8f2e33467507470c63ff70c9739ae4588b53ceaaf4acf465f3f.exe 1944 fca8f8e89a18a8f2e33467507470c63ff70c9739ae4588b53ceaaf4acf465f3f.exe 1944 fca8f8e89a18a8f2e33467507470c63ff70c9739ae4588b53ceaaf4acf465f3f.exe 1944 fca8f8e89a18a8f2e33467507470c63ff70c9739ae4588b53ceaaf4acf465f3f.exe 1944 fca8f8e89a18a8f2e33467507470c63ff70c9739ae4588b53ceaaf4acf465f3f.exe 1944 fca8f8e89a18a8f2e33467507470c63ff70c9739ae4588b53ceaaf4acf465f3f.exe 1944 fca8f8e89a18a8f2e33467507470c63ff70c9739ae4588b53ceaaf4acf465f3f.exe 1944 fca8f8e89a18a8f2e33467507470c63ff70c9739ae4588b53ceaaf4acf465f3f.exe 1944 fca8f8e89a18a8f2e33467507470c63ff70c9739ae4588b53ceaaf4acf465f3f.exe 1944 fca8f8e89a18a8f2e33467507470c63ff70c9739ae4588b53ceaaf4acf465f3f.exe 1944 fca8f8e89a18a8f2e33467507470c63ff70c9739ae4588b53ceaaf4acf465f3f.exe 1944 fca8f8e89a18a8f2e33467507470c63ff70c9739ae4588b53ceaaf4acf465f3f.exe 1944 fca8f8e89a18a8f2e33467507470c63ff70c9739ae4588b53ceaaf4acf465f3f.exe 1944 fca8f8e89a18a8f2e33467507470c63ff70c9739ae4588b53ceaaf4acf465f3f.exe 1944 fca8f8e89a18a8f2e33467507470c63ff70c9739ae4588b53ceaaf4acf465f3f.exe 1944 fca8f8e89a18a8f2e33467507470c63ff70c9739ae4588b53ceaaf4acf465f3f.exe 1944 fca8f8e89a18a8f2e33467507470c63ff70c9739ae4588b53ceaaf4acf465f3f.exe 1944 fca8f8e89a18a8f2e33467507470c63ff70c9739ae4588b53ceaaf4acf465f3f.exe 1944 fca8f8e89a18a8f2e33467507470c63ff70c9739ae4588b53ceaaf4acf465f3f.exe 1944 fca8f8e89a18a8f2e33467507470c63ff70c9739ae4588b53ceaaf4acf465f3f.exe 1944 fca8f8e89a18a8f2e33467507470c63ff70c9739ae4588b53ceaaf4acf465f3f.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1944 fca8f8e89a18a8f2e33467507470c63ff70c9739ae4588b53ceaaf4acf465f3f.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\fca8f8e89a18a8f2e33467507470c63ff70c9739ae4588b53ceaaf4acf465f3f.exe"C:\Users\Admin\AppData\Local\Temp\fca8f8e89a18a8f2e33467507470c63ff70c9739ae4588b53ceaaf4acf465f3f.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
PID:1944